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Abstract — We consider the Gaussian Multiple Access Wire-Tap 
Channel (GMAC-WT). In this scenario, multiple users commu- 
nicate with an intended receiver in the presence of an intelligent 
and informed wire-tapper who receives a degraded version of 
the signal at the receiver. We define a suitable security measure 
for this multi-access environment. We derive an outer bound for 
the rate region such that secrecy to some pre-determined degree 
can be maintained. We also And, using Gaussian codebooks, an 
achievable such secrecy region. Gaussian codewords are shown to 
achieve the sum capacity outer bound, and the achievable region 
concides with the outer bound for Gaussian codewords, giving 
the capacity region when inputs are constrained to be Gaussian. 
We present numerical results showing the new rate region and 
compare it with that of the Gaussian Multiple-Access Channel 
(GMAC) with no secrecy constraints. 

I. Introduction 

Shannon, in [1], analyzed secrecy systems in communi- 
cations and he showed that to achieve perfect secrecy of 
communications, we must have the conditional probability of 
the cryptogram given a message independent of the actual 
transmitted message. 

In [2], Wyner applied this concept to the discrete memory- 
less channel, with a wire-tapper who has access to a degraded 
version of the intended receiver's signal. He measured the 
amount of "secrecy" using the conditional entropy A, the 
conditional entropy of the transmitted message given the 
received signal at the wire-tapper. The region of all possible 
(R, A) pairs is determined, and the existence of a secrecy 
capacity, C s , for communication below which it is possible to 
transmit zero information to the wire-tapper is shown [2]. 

Carleial and Hellman, in [3], showed that it is possible 
to send several low-rate messages, each completely protected 
from the wire-tapper individually, and use the channel at close 
to capacity. The drawback is, in this case, if any of the 
messages are revealed to the wire-tapper, the others might 
also be compromised. In [4], the authors extended Wyner's 
results to Gaussian channels and also showed that Carleial and 
Hellman's results in [3] also held for the Gaussian channel [4]. 
Csiszar and Korner, in [5], showed that Wyner's results can be 
extended to weaker, so called "less noisy" and "more capable" 
channels. Furthermore, they analyzed the more general case 
of sending common information to both the receiver and 
the wire-tapper, and private information to the receiver only. 
More recently, Maurer showed in [6] that a public feedback 



channel can make secret communications possible even when 
the secrecy capacity is zero. 

In [7] we extended these concepts to the GMAC and defined 
two separate secrecy constraints, which we called individual 
and collective secrecy constraints. We concerned ourselves 
mainly with the perfect secrecy rate region for both sets of 
constraints. For the individual constraints, this corresponds to 
the entropy of the transmitted messages given the received 
wire-tapper signal and the other users' transmitted signals 
being equal to the entropy of the transmitted message. The col- 
lective secrecy constraints provided a more relaxed approach 
and utilized other users' signals as an additional source of 
secrecy protection. In this paper, we consider the GMAC- 
WT and focus on the "collective secrecy constraints" for the 
GMAC-WT, defined in [7] as the normalized entropy of any set 
of messages conditioned on the wire-tapper's received signal. 
We consider the general case where a pre-determined level 
of secrecy is provided. Under these constraints, we find an 
outer bound for the secure rate region. Using random Gaussian 
codebooks, we find an achievable secure rate region for each 
constraint, where users can communicate with arbitrarily small 
probability of error with the intended receiver, while the wire- 
tapper is kept ignorant to a pre-determined level. We show 
that when we constrain ourselves to using Gaussian code- 
books, these bounds coincide and give the capacity region for 
Gaussian codebooks. Furthermore, it is shown that Gaussian 
codebooks achieve sum capacity for the GMAC-WT using 
simultaneous superposition coding, [8]. We also show that a 
simple TDMA scheme using the results of [4] for the single- 
user case also achieves sum capacity, but provides a strictly 
smaller region than shown in this paper. 

II. System Model and Problem Statement 

We consider K users communicating with a receiver in the 
presence of a wire-tapper, as illustrated in Figure 1. 

Transmitter j chooses a message Wj from a set of equally 
likely messages {!,..., Mj}. The messages are encoded using 
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nRj 



codes into {X™{W 3 )}, where Rj = ±\og 2 M r 



The encoded messages are then transmitted, and the intended 
receiver and the wire-tapper each get a copy Y n and Z n . We 
would like to communicate with the receiver with arbitrarily 
low probability of error, while maintaining perfect secrecy, the 




eavesdropper 



Fig. 1. The GMAC-WT System Model 

exact definition of which will be made precise shortly. 
The signal at the intended receiver is given by 

K 

Y = ^X,+N 1 

and the wire-tapper receives 

Z = Y + N 2 



(1) 



(2) 



where each component of Ni ~ Af (0, of) , i = 1,2. We also 
assume the following received power constraints: 



^ Xji — Pj.max, j — 1, • ■ 



n 



(3) 



A. The Secrecy Measure 



We aim to provide each user with a pre-determined amount 
of secrecy. To that end, in [7], we used an approach similar 
to [4], and defined a set of secrecy constraints using the 
normalized equivocations for sets of users: 



#(W S |Z) 



vs c ic 



(4) 



H{W S ) 

where AC = {1, . . . , K) and W s = {Wj} jeS . 

As our secrecy criterion, we require that each user j G 
{!,..., K} must satisfy A s > S for all sets <S C AC, and 
<5 G [0, 1] is the required level of secrecy. S = 1 corresponds to 
perfect secrecy, where the wire-tapper is not allowed to get any 
information; and 5 = corresponds to no secrecy constraint. 
This constraint guarantees that each subset of users maintains 
a level of secrecy greater than 5. Since this must be true for 
all sets of users, collectively the system has at least the same 
level of secrecy. However, if a group of users are somehow 
compromised, the remaining users may also be vulnerable. 

B. The S-secret rate region 

Definition 1 (Achievable rates with r5-secrecy). The rate 
if -tuple R = (R\, . . . , Rk) is said to be achievable with 
(5-secrecy if for any given e > there exists a code of 
sufficient length n such that 

-log 2 M k >R k -e k=l,...,K (5) 
n 

P e < e (6) 

A s >5 VSC1C (7) 

where user k chooses one of M k symbols to transmit according 
to the uniform distribution, and P e is the average probability 



of error. We will call the set of all achievable rates with S- 
secrecy, the 8-secret rate region, and denote it C^ s \ 

C. Some Preliminary Definitions 

Before we state our results, we define the following quan- 
tities for any S C IC. 
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where C(£) = \ log(l + £). The quantities with S — K, will 
sometimes also be used with the subscript sum. 

III. Outer Bound on the <5-Secret Rate Region 

In this section, we present an outer bound on the set of 
achievable <5-secret rates, denoted C^ s \ and explicitly state the 
outer bound on the achievable sum-rate with (5-secrecy. We 
also evaluate this bound assuming we are limited to using 
Gaussian codebooks for calculation purposes, 

Our main result is presented in the following theorem: 

Theorem 2. For the GMAC-WT, the secure rate-tuples 
(Ri, . . . , Rk) such that A 5 > 5, V5 C JC must satisfy 



Rs < C$ 



(M) 



Rs<- 6 



Cj 



c 



The set of all R satisfying (8) and (9) is denoted C (<5) . 
Corollary 2.1. The sum-rate with 5-secrecy satisfies 



(8) 
(9) 



3=1 L 



f1(M) 

^ sum 



^ sum 



(10) 



Corollary 2.2. The rate-tuples with (5-secrecy using Gaussian 
codebooks must satisfy (8) and 



Rs < 



°5 



V5 c AC 



(11) 



The set of all such R is denoted Q( s \ 

Proof: See Appendix I. □ 

Remark: Since C^ MW) = C^ MW) , Corollary 2.2 indicates that 
Gaussian codebooks have the same upper bound on sum 
capacity given by Corollary 2.1. 

IV. Achievable (5-Secret Rate Regions 

A. Gaussian Codebooks 

In this section, we find a set of achievable rates using Gaus- 
sian codebooks, which we call Q^ s \ and show that Gaussian 
codebooks achieve the limit on sum capacity. This region 
coincides with our previous upper bound evaluated using 
Gaussian codebooks, Q^ s \ giving the full characterization of 
the (5-secret rate region using Gaussian codebooks, 



Fig. 2. Regions for 5 = 0, 0.5, 1 and Pi = 10, P 2 = 5, of = 1, of = 2 
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Fig. 3. Regions for 5 = 0, 0.5, 1 and P 1 = 10, P 2 = 5, a\ = 1, of = 7 

Theorem 3. We can transmit with <5-secrecy using Gaussian 
codebooks at rates satisfying (8) and (11). The region contain- 
ing all R satisfying these equations is denoted C/W. 

Corollary 3.1. We can transmit with perfect secrecy (8 = 1) 
using Gaussian codebooks at rates satisfying 

R s < Cf - C^ MW) (12) 
Proof: See Appendix EL The corollary was also presented 
in [7]. □ 
B. Time-Division 

We can also use a TDMA scheme and the result of [4] to 
get an achievable region: 

Theorem 4. Consider this scheme: Let otk G [0,1] , k = 
1,...,K and Y2k=i ak ~ User k only transmits ak of 
the time with power Pk,max/otk using the scheme described 
in [4]. Then, the following set of rates is achievable: 

c - c( ^%"rO 

U {R:i4<a fc ^ ^ - Wg+glZ , 

ifc<a fc a(iW\ A = 1 (13) 

We will call the set of all R satisfying the above, C^p DMA . 
Proof: Follows directly from [4, Theorem 1] □ 

V. Numerical Results and Conclusions 

Figures 2—4 show the shapes of for (5 = 0, 0.5, 1 for two 
users. When 8 = 0, we are not concerned with secrecy, and 



Fig. 4. Regions for S = 0, 0.5, 1 and Pi = 10, P 2 = 5, a\ = 1, a\ = 20 
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Fig. 5. c£L vs. erg/erf. (7(15) = 4, (7(50) = 5.67, C(1000) = 9.97 

the resulting region corresponds to the standard GMAC region, 
[9]. The region for S = 1 corresponds to the perfect secrecy 
region - transmitting at rates within this region, it is possible 
to send zero information to the wire-tapper. The intermediate 
region, 8 = 0.5, can be thought of as constraining at least half 
the transmitted information to be secret. It can be seen that this 
enlarges the region from the perfect secrecy case. In Figure 2, 
it is shown that relaxing this constraint may provide a larger 
region, the limit of which is the GMAC region. In Figures 3 
and 4, however, this region is already equivalent to the GMAC 
capcity region. Hence, relaxing our secrecy constraints will not 
result in further improvement in the set of achievable rates. 
Note that it is possible to send at capacity of the GMAC and 
still provide a non-zero level of secrecy, the minimum value of 
which depends on how much extra noise the wire-tapper sees. 
Also shown in the figures is the regions achievable by the 
TDMA scheme described in the previous section. Although 
TDMA achieves the sum capacity with optimum time-sharing 
parameters, this region is in general contained within Q(°>. 

One important point is the dependence of the perfect secrecy 
region, on a\. It can easily be shown that as erf — ► oo, 
the perfect secrecy region coincides with the standard GMAC 
region, Q(°\ Thus, when the wire-tapper sees a much noisier 
channel than the intended receiver, it is possible to send 
information with perfect secrecy at close to capacity. However, 
when this is not the case, is limited by the noise powers 
regardless of how much we increase the input powers, since 
limp^oo ciiL = C{al/a{). 

Another interesting note is that even when a user does not 
have any information to send, it can still generate and send 



random codewords to confuse the eavesdropper and help other 
users. This can be seen in Figures 2 and 3 as the TDMA region 
does not end at the "legs" of when is not equal to 
the GMAC capacity region. 

Appendix I 
Outer Bounds 
We show that any achievable rate vector, R, needs to satisfy 
Theorem 2. (8) is due to the converse of the GMAC coding 
theorem. To see (9), start with a few lemmas: 

Lemma 5. Let X s = {X k }kes where S C JC. Then, 

Rs < ^I{X s ;Y\Z)+u n VSC/C (14) 

where v n — > as e — > 0. 

Proof: Let S C JC and consider the two inequalities: 

H(W S \Z) H(W S \Z) 



5<A S = 



< 



n{R & 



\S\e) 



(15) 



H(W S \Z,Y) < H(W S \Y) < H(W K \Y) < Vn (16) 

where (16) follows using Fano's Inequality with rj n — > as 
e — > and n — > oo. Using (15) and (16), we can write 

F(W s |Z)+r ?n -^(W 5 |Z,Y) 



6 < 



< 



n(Rs-\S\e) 
I(X s ;Y\Z)+7 ln 



(17) 
(18) 



n(R s - \S\e) 

with the last step using Ws — * Xs — > Y — > Z. Rearranging 
and defining i/„ = + |<S|e completes the proof. □ 

Lemma 6 (Lemma 10 in [4]). Let £ = ^ff(Y), then, 

1 



ff(Z)-tf(Y)>n0(O^log 
Corollary 6.1. 



27re ( a\ 



2ne 



-2 2 « 



(19) 



(20) 



^)-^(Y)>flo g (l + ^ 

Proof: The lemma is given in [4] and its proof is 
omitted here since it is easily shown using the entropy power 
inequality, [9]. To see the corollary, write 



H(Y)<-log(2ne(P K + al)) 



(21) 



Let H(Y) = <. Then, £ < \ log (2ire(P K + af)), and 
since <j>(£) is a non-increasing function of £, we get > 
(| log (27re(P K + erf))). Then, from Lemma 6, 



H(Z)-H(Y)>2k»(l + s a^ 



Lemma 7. For the GMAC-WT, 



7(X 5 ;Y|Z) < nC { s ] - nC 



27re ZvjeS z 



Corollary 7.1. For the GMAC-WT, 

I(X K] Y\Z)<n(C22 m -C2%>) 



(22) 
□ 

(23) 
(24) 



Proof: Start by writing 

J(X s ,Y|Z)=tf(X 5 |Z)-tf(X5|Y,Z) (25) 

= H(X S \Z) - H(X S \Y) (26) 

= [H(X S ) - H(X S \Y)} - [H(X S ) - H(X S \Z)} (27) 
< [^(X 5 |X 5 c)- J ff(X 5 |Y,X 5 c)] 

-[H(X S )-H(X S \Z)] (28) 

= /(X 5 ;Y|X 5c )-/(X 5 ;Z) (29) 

= H(Y\X S .) - H(Y|X K ) - [tf(Z) - # (Z|X S )] (30) 

- ET^^WI^-Sxsc) - E?=i^(^l^- 1 ,x K ) 

- [H(Z) - H(Z\X S )} (31) 

- [H(Z) - H{Z\X S )\ (32) 



<Er=i^Iog[27re(P 5 +a?) 



E^log^ea?) 



- [H(Z) - H(Z\X S )} 
= nC (Ps/of) - [H{Z) - H(Z\X S )} 



(33) 
(34) 



where (26) follows from X s -> Y Z and (32) follows 
using the memoryless property of M. For the term in brackets, 
start by using the entropy power inequality: 



2 |H(Z) > 2 l if(Z|X 5 ) + ^ H(X,) 

2s«(z)-; ff(z|x s ) > x + 2 -fH(Z|X s ) ^ 2 iH(x 3 ) 
Then, 

2 fH(Z|X s ) = 2 f E?=i^(2i|2 i_1 .Xs) 

< 2*Er=i ff ( z *l x 5,i) 

< 25 E?=i 3 log(27re(P S c+ ( r2 +(T | ) ) 

= 27re(P 5 o + o\ + o\) 
Using this in (36), and taking the log we get, 

2ixe ^ 1 



ff(Z)-tf(Z|X s )>-log 1+ psc+u( + al 



(35) 
(36) 

(37) 
(38) 
(39) 
(40) 



(41) 



which, with (34) completes the proof. To see the corollary, 

I{X K ;Y\Z)=H{X K \Z)-H{X K \Y,Z) (42) 

= H(X K \Z) - H(X K \Y) (43) 
= [H{Z\X K ) + H(X K )-H{Z)\ 

- \H{Y\X K ) + H{X K ) - H(Y)} (44) 

= [H(Z\X K ) - H(Y\X K )} - \H{Z) - H(Y)} (45) 

n 

= [H(Zi\X K J - H(Yi\X Kii )] - [H(Z) - H(Y)](46) 

i=i 

[ft Th 
- log {2ne{a\ + - - log (2^1) 

-[H(Z)-H(Y)] 



< 





4\ 


-? log ( 









— ^ c 



c 



(MW) 

sum 



(47) 
(48) 
(49) 



where (43) is due to X^: — > Y — > Z and (46) to the memory- 
lessness of the channels. (48) follows from Corollary 6.1. □ 

This and Lemma 5, complete the proof of Theorem 2. 

Corollary 2.1 follows from Corollary 7.1 and Lemma 5. 

Corollary 2.2 follows simply with H(Xj) = § log 27rePj . 

Appendix II 
Achievable Rates 
Let R = (Ri, . . . , R K ) satisfy (8) and (11). For each user 
k e JC, consider the scheme: 

1) Let M k = 2"( iife - e ') where < e' < e. Let M k = M ks M k0 



where M k 



Mr , Mi 



hi) 



Ml~^ k , and fi k > 6 will be 



chosen later. Then, R k = R ks + R ka + e' where R ks = 

1 logMfc s and R k o = — logM k0 . We can choose e' and n 
to ensure that M ks ,M k Q are integers. 

2) Generate 3 codebooks X ks ,X k o and X kx . X ks consists of 
M ks codewords, each component of which is drawn ~ 
A^(0, X ks P k — e). Codebook Xfco has M k o codewords with 
each component randomly drawn ~ J\f (0, \ k oP k — e) and 
X kx has M kx codewords with each component randomly 
drawn ~ jV(0, X kx P k — e) where e is an arbitrarily small 
number to ensure that the power constraints on the code- 
words are satisfied with high probability and X ks + X k0 + 
X kx = 1. Define R kx = — \ogM kx and M kt = M k M kx . 

3) Each message W k G {1, . . . , M k } is mapped into a message 
vector W fc = (W ks ,W k0 ) where W ks G {l,...,M ks } 
and W k Q G {1, . . . , M k o}. Since W k is uniformly chosen, 
W ks , W k o are also uniformly distributed. 

4) To transmit message W k G {1, . . . , M k }, user k finds the 

2 codewords corresponding to components of and also 
uniformly chooses a codeword from X kx . He then adds all 
these codewords and transmits the resulting codeword, X^, 
so that we are actually transmitting one of M kt codewords. 
Let R kt = I log M kt + e' = R ks + R kQ + R kx + e'. 

We will choose the rates such that for all S C JC, 

J2 k es R ks = Y.kes^Rk < C S M> - C'g W> (50) 
Ef=i[^o + R kx ] = Ef=i[(l - ^)R k + R kx ] = CS(51) 

E kes Rkt = E kes + R kx ] < c< M) (52) 

From (52) and the GMAC coding theorem, with high probabil- 
ity the receiver can decode the codewords with low probability 
of error. To show Ag > S, VS C JC, we concern ourselves 
only with MAC sub-code {X ks } k=1 . From this point of view, 
the coding scheme described is equivalent to each user k G JC 
selecting one of M ks messages, and sending a uniformly 
chosen codeword from among M k0 M kx codewords for each. 

Let Wg> = {W ks } kes and A<f = and define 

X s = Efc=i X fe . For JC write 

= g(Wff|Z) = g(Wg',Z)-g(Z) 

K i?(w<;>) H(wg') 

g(Wff,X s , Z) - g(X s |Wg', Z) - g(Z) 
ff(W<?>) 

g(W^+g(Z|Wff,X s )-g(Z) 
ff(Wg>) 



(53) 



(54) 



+ 



ff(X E |Wg>) 



H(X E |W«,Z) 



#(W<?>) 



= 1 - 



J(X S ;Z)- J(X s ;Z|Wff) 



(55) 



(56) 



ff(Z|W<?,X E ) = 



where we used Wj£' -> X E -> Z 
i?(Z|X E ) to get (56). We will consider the two terms individ- 
ually. First, we have the trivial bound due to channel capacity: 



J(X E ;Z)<nCS (57) 
7(X S ;Z|W^) =i/(X s |W< : s) )-i/(X E |W<5 ) ,Z). Since 
user k sends one of M k oM kx codewords for each message, 

H{Xv\Wg) = log (UtiM k0 M kx ) (58) 

= n E k =il( l - »k)Rk + Rkx] (59) 

We can also write 



*T(X E |W£\Z)<n»j; 



(60) 



where T]' n — > as n — > oo since, with high probability, the 
eavesdropper can decode X E given W<?> due to (51). Using 
(50), (51), (57), (59) and (60) in (56), we get 



A< s) > 1 



r<(MW) 

^ sum 



Ef=i[(l-M^ + ^x]+r/; 



WM) _ ^(MW) 

Is sum *ssum 



= l - 



1 as r{ n -> 



(61) 
(62) 



Then, 



H(yr%>\Z)=H(W%>) (63) 
H(Wf |Z) + Jf (W$ |Z) > #(Wg>) + flTWgi) (64) 
As conditioning reduces entropy, we have iffW^ |Z) < 
H(Wf) and H(Wf c \Z) < ff(W^). Then, from the 
above equation we conclude that we must have H(Wg ) ) = 
if(Wg°|Z), VS c JC. This makes Af = 1 V5 C K. The 
proof is completed by noting that 



A s > 



> <5 (65) 



F(W 5 ) F(W S ) E fe65 ^ 
We can think of {Wfcs} as the "protected" messages and 
{Wfco} as the "unprotected" messages. The corollary is appar- 
ent from (62), and also follows as (11) implies (8) if 5 = 1. 
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